Apparatus and method for detecting abnormal connection

An apparatus, intended for use in detecting an abnormal connection, comprising:

• a log pattern identifier configured to identify a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• a log analyzer configured to perform a log analysis for detecting an abnormal connection pattern indicating a specific connection stage pair of the connection stages, among the plurality of connection patterns;
• wherein the log pattern identifier and the log analyzer are implemented by at least one hardware processor.

An apparatus, intended for use in detecting an abnormal connection, comprising:

• a log pattern identifier configured to identify a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• a log analyzer configured to perform at least one of:
• a first log analysis detecting an abnormal connection stage pair, of the connection stages, indicated by a specific connection pattern among the plurality of connection patterns, and
• a second log analysis detecting an abnormal connection pattern indicating a specific connection stage pair of the connection stages, among the plurality of connection patterns;
• wherein the log pattern identifier and the log analyzer are implemented by at least one hardware processor.

A method, of detecting an abnormal connection, comprising:

• identifying a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• performing a first log analysis for detecting an abnormal connection stage pair, of the connection stages, indicated by a specific connection pattern among the plurality of connection patterns;
• wherein the identifying and the performing are implemented using at least one hardware processor.

A method, of detecting an abnormal connection, comprising:

• identifying a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• performing a log analysis for detecting an abnormal connection pattern indicating a specific connection stage pair of the connection stages, among the plurality of connection patterns;
• wherein the identifying and the performing are implemented using at least one hardware processor.

A method, of detecting an abnormal connection, comprising:

• identifying a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• performing at least one of:
• a first log analysis detecting an abnormal connection stage pair, of the connection stages, indicated by a specific connection pattern among the plurality of connection patterns, and
• a second log analysis detecting an abnormal connection pattern indicating a specific connection stage pair, of the connection stages, among the plurality of connection patterns;
• wherein the identifying and the performing are implemented using at least one hardware processor.

A computer program stored in a non-transitory storage medium and configured to enable a hardware processor to implement operations comprising:

• identifying a plurality of connection patterns, each indicating connection stages, from log data regarding a system connection;
• and
• performing at least one of:
• a first log analysis detecting an abnormal connection stage pair, of the connection stages, indicated by a specific connection pattern among the plurality of connection patterns, and
• a second log analysis detecting an abnormal connection pattern indicating a specific connection stage pair, of the connection stages, among the plurality of connection patterns.